| CVE-2026-76554 |
The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to…
|
7.2
High
|
Sep 19, 2026 |
| CVE-2026-76557 |
The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration…
|
6.8
Medium
|
Sep 16, 2026 |
| CVE-2026-76558 |
The WP Import Export Lite WordPress plugin before 3.9.33 does not escape custom field names retrieved from the…
|
6.8
Medium
|
Sep 16, 2026 |
| CVE-2026-76559 |
The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during…
|
4.1
Medium
|
Sep 16, 2026 |
| CVE-2026-76555 |
The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it…
|
6.8
Medium
|
Sep 16, 2026 |
| CVE-2026-76556 |
The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values…
|
6.8
Medium
|
Sep 16, 2026 |
| CVE-2026-76550 |
The WP Import Export Lite WordPress plugin before 3.9.34 does not validate a user-supplied output path when writing…
|
7.2
High
|
Sep 16, 2026 |
| CVE-2026-76551 |
The WP Import Export Lite WordPress plugin before 3.9.33 does not restrict which PHP function may be applied to exported…
|
7.2
High
|
Sep 16, 2026 |
| CVE-2026-76552 |
The WP Import Export Lite WordPress plugin before 3.9.33 does not validate the type, extension or content of files it…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-76553 |
The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied…
|
6.5
Medium
|
Sep 16, 2026 |